Senior GRC & InfoSec Analyst (Hybrid)

NCBioImpact; Durham (NC); Hybride; USD 109 000 - 202 000; Plein temps

Résumé du poste

Novartis is seeking a GRC Compliance Senior Analyst to support information security, risk and compliance across business applications and IT/OT services. The role focuses on ensuring solutions meet security standards, regulatory requirements and governance frameworks, while driving continuous improvement and audit readiness.

The position emphasizes collaboration with service teams, vendors, and cross-functional partners, with hybrid work in Durham, NC.

Qualifications

• Over 8+ years of experience in Business Information Security and Compliance, IT Risk management, Audit management, Information Governance and Management, GRC.
• Strong knowledge of risk management and governance frameworks and regulatory requirements.
• Experience with audits, controls, and cross-functional governance initiatives.

Responsabilités

• Provide ISC governance/risk advice and support for Operations IT and OT Function and oversee a specific governance/risk area globally. Ensure IT/OT project risks are managed in line with ISC strategy, policy framework, laws and regulations and industry standards.
• Monitor information risk and drive proactive mitigation; provide risk-based treatment of threats, issues and vulnerabilities; guide teams on risk exposure and safeguards.
• Deliver global information governance programs like risk management, data classification, storage & transmission guidelines, audit readiness support.
• Maintain knowledge of internal controls and risk frameworks; support implementation and monitoring of these controls.
• Provide KPI reporting, dashboards, and continuous improvements to ensure compliance.
• Assess impact of new technologies and regulatory changes on information security and data privacy laws.

Connaissances

Security & Compliance

Risk Management

Audit Management

Stakeholder Management

English Proficiency

Formation

Bachelor's degree in Business/Technical/Scientific area

Description du poste

Novartis is seeking a GRC Compliance Senior Analyst to support information security, risk and compliance across business applications and IT/OT services. The role focuses on ensuring solutions meet security standards, regulatory requirements and governance frameworks, while driving continuous improvement and audit readiness.

The position emphasizes collaboration with service teams, vendors, and cross-functional partners, with hybrid work in Durham, NC.